Updated November 15, 2026

Code signing policy

Free code signing provided by SignPath.io, certificate by SignPath Foundation. The Windows installer (Muelle-Setup.exe) and the two programs it installs (muelle.exe, the dock, and muelle-settings.exe, Settings) are signed through the SignPath Foundation program for open source projects. The certificate is issued to SignPath Foundation, so Windows shows it as the publisher.

What gets signed

Only files built by the project's own release workflow on GitHub-hosted runners, from the public source code in github.com/crafter-station/Muelle.
Nothing built on a personal computer, and no third-party program is signed under this certificate.
Every signed file is named Muelle and carries the version of the release it belongs to.

Team roles

Committers and reviewers: CristianOlivera1 — may change the code; changes from anyone else are reviewed in a pull request first.
Approvers: CristianOlivera1 — approve each signing request by hand before a release is signed.

Every member of the team uses multi-factor authentication on GitHub and on SignPath.

Privacy

This program will not transfer any information to other networked systems unless specifically requested by the user or the person installing or operating it. The exceptions are the update check and the optional AI usage island for Claude Code, Codex, GitHub Copilot, Cursor, OpenCode Go, Gemini CLI, or Antigravity. They are described in the privacy policy and can be turned off in Settings.

Report a problem

If a signed file does something this page or the privacy policy does not describe, please open an issue.